Lucene search
+L
SusecveMost viewed

62981 matches found

SUSE CVE
SUSE CVE
•added 2026/03/28 12:25 a.m.•19 views

SUSE CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

4.3CVSS6.1AI score0.0047EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/03/26 5:10 p.m.•19 views

SUSE CVE-2026-1519

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries see:...

7.5CVSS5.8AI score0.01599EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2026/03/25 4:56 p.m.•19 views

SUSE CVE-2026-23334

In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: handle short interrupt urb messages properly If an interrupt urb is received that is not the correct length, properly detect it and don't attempt to treat the data as valid...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2026/03/25 4:53 p.m.•19 views

SUSE CVE-2026-33515

Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding...

6.9CVSS5.9AI score0.01039EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/03/25 11:53 a.m.•19 views

SUSE CVE-2026-4647

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

6.1CVSS5.8AI score0.00168EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 11:53 a.m.•19 views

SUSE CVE-2026-4711

Use-after-free in the Widget: Cocoa component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

6.3CVSS7.2AI score0.00398EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•19 views

SUSE CVE-2026-4713

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

6.3CVSS7.2AI score0.00433EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 11:52 a.m.•19 views

SUSE CVE-2026-4715

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

6.3CVSS7.2AI score0.0043EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2026/03/25 12:25 a.m.•19 views

SUSE CVE-2026-31788

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU The Xen privcmd driver allows to issue arbitrary hypercalls from user space processes. This is normally no problem, as access is usually limited to root and the hypervisor will den...

8.2CVSS5.8AI score0.00154EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
•added 2026/02/27 12:25 a.m.•19 views

SUSE CVE-2026-25952

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfSetWindowMinMaxInfo dereferences a freed xfAppWindow pointer because xfrailgetwindow in xfrailserverminmaxinfo returns an unprotected pointer from the railWindows hash table, and the main thread can...

5.3CVSS5.8AI score0.00599EPSS
SaveExploits1References14
SUSE CVE
SUSE CVE
•added 2026/02/27 12:24 a.m.•19 views

SUSE CVE-2026-27830

c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and javax.naming.Reference instances. Several c3p0 ConnectionPoolDataSource implementations have a property called userOverridesAsString which conceptually represents a Map. Prior to...

8CVSS6AI score0.00534EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/02/16 1:5 a.m.•19 views

SUSE CVE-2023-53579

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-K�nig pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action...

5.5CVSS5.8AI score0.00138EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
•added 2026/02/16 12:24 a.m.•19 views

SUSE CVE-2026-23209

In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlancommonnewlink valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link set up dev p1 ip link set up dev p2 ip lin...

7.8CVSS5.2AI score0.00119EPSS
SaveExploits0References155
SUSE CVE
SUSE CVE
•added 2026/01/20 12:32 a.m.•19 views

SUSE CVE-2025-15534

A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used...

7.8CVSS5.2AI score0.00219EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/01/06 12:28 a.m.•19 views

SUSE CVE-2025-11393

A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle. This allo...

8.7CVSS6.8AI score0.00199EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/01/06 12:25 a.m.•19 views

SUSE CVE-2025-65637

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS6.7AI score0.00639EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2025/12/31 12:31 a.m.•19 views

SUSE CVE-2022-50822

In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Release MR restrack when delete The MR restrack also needs to be released when delete it, otherwise it cause memory leak as the task struct won't be released...

5.5CVSS6.4AI score0.0017EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/12/25 1:4 a.m.•19 views

SUSE CVE-2022-50721

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong calling convention for prepslavesg The calling convention for preslavesg is to return NULL on error and provide an error log to the system. Qcom-adm instead provide error pointer when an error occur...

7CVSS6.4AI score0.0021EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/25 1:4 a.m.•19 views

SUSE CVE-2022-50734

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: Fix memleak in nvmemregister devsetname will alloc memory for nvmem-dev.kobj.name in nvmemregister, when nvmemvalidatekeepouts failed, nvmem's memory will be freed and return, but nobody will free memory for...

6.5AI score0.00212EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:39 a.m.•19 views

SUSE CVE-2022-50632

In the Linux kernel, the following vulnerability has been resolved: drivers: perf: marvellcn10k: Fix hotplug callback leak in tadpmuinit tadpmuinit won't remove the callback added by cpuhpsetupstatemulti when platformdriverregister failed. Remove the callback by cpuhpremovemultistate in fail path...

5.5CVSS6.5AI score0.00193EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:39 a.m.•19 views

SUSE CVE-2022-50643

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifscopyfilerange If the file is used by swap, before return -EOPNOTSUPP, should free the xid, otherwise, the xid will be leaked...

3.3CVSS6.5AI score0.00197EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•19 views

SUSE CVE-2022-50656

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput called from nfcgenlsendtarget when target-sensbreslen, which is duplicated from an nfctarget in pn533, is too large as the nfctarge...

6.1CVSS6.5AI score0.00337EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/10/24 11:24 p.m.•19 views

SUSE CVE-2025-40019

In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essivaeadcrypt so that it's also checked for decryption and in-place encryption...

7CVSS6.5AI score0.0027EPSS
SaveExploits1References26
SUSE CVE
SUSE CVE
•added 2025/09/04 11:23 p.m.•19 views

SUSE CVE-2025-38721

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlinkdumptable: if res ctgeneral; // HERE cb-args1 = unsigned longct; ... While its very unlikely, its possible that ct == last. If this...

5.5CVSS6.3AI score0.00165EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2025/05/21 12:46 a.m.•19 views

SUSE CVE-2025-37963

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users Support for eBPF programs loaded by unprivileged users is typically disabled. This means only cBPF programs need to be mitigated for BHB. In addition, only...

2.5CVSS6.3AI score0.00176EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
•added 2025/05/03 2:53 a.m.•19 views

SUSE CVE-2022-49837

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory leaks in checkfunccall kmemleak reports this issue: unreferenced object 0xffff88817139d000 size 2048: comm "testprogs", pid 33246, jiffies 4307381979 age 45851.820s hex dump first 32 bytes: 01 00 00 00 00 00 00 00...

3.3CVSS6.4AI score0.00187EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/03/19 2:50 a.m.•19 views

SUSE CVE-2025-29786

Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser is given an unbounded input string, it will attempt to compile the entire string and generate an Abstract Syntax Tree AST node for each part of the expression. In scenarios wher...

7.5CVSS6.5AI score0.00602EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/02/27 3:8 a.m.•19 views

SUSE CVE-2022-49328

In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76txqschedule by protecting mtxq-wcid with rculock between mt76txqschedule and stainfoalloc, free. 18853.876689...

5.5CVSS6.3AI score0.00416EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2025/02/14 4:15 a.m.•19 views

SUSE CVE-2024-50052

Mattermost versions 9.10.x = 9.10.2, 9.11.x = 9.11.1, 9.5.x = 9.5.9 fail to check that the origin of the message in an integration action matches with the original post metadata which allows an authenticated user to delete an arbitrary post...

4.3CVSS7.9AI score0.00278EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/01/12 12:18 a.m.•19 views

SUSE CVE-2024-47143

In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radixlock radixlock shouldn't be held while holding dmahashentryidx.lock otherwise, there's a possible deadlock scenario when dma debug API is called holding rqlock: CPU0 CPU1 CPU2 dmafreeatt...

4.1CVSS7.6AI score0.00173EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/12/28 3:49 a.m.•19 views

SUSE CVE-2024-53227

In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in bfadimmoduleexit BUG: KASAN: slab-use-after-free in lockacquire+0x2aca/0x3a20 Read of size 8 at addr ffff8881082d80c8 by task modprobe/25303 Call Trace: dumpstacklvl+0x95/0xe0 printreport+0xcb/0x6...

5.5CVSS6.9AI score0.00275EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2024/10/26 3:1 a.m.•19 views

SUSE CVE-2024-49945

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic...

5.5CVSS7.2AI score0.00228EPSS
SaveExploits0References22
SUSE CVE
SUSE CVE
•added 2024/10/21 3:47 p.m.•19 views

SUSE CVE-2024-47699

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential null-ptr-deref in nilfsbtreeinsert Patch series "nilfs2: fix potential issues with empty b-tree nodes". This series addresses three potential issues with empty b-tree nodes that can occur with corrupted...

5.5CVSS6.7AI score0.00261EPSS
SaveExploits0References18
SUSE CVE
SUSE CVE
•added 2024/09/09 4:0 a.m.•19 views

SUSE CVE-2019-1000014

Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via Victim fetches packages from malicious/compromised mirro...

8.8CVSS7.6AI score0.0179EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/09/07 3:38 a.m.•19 views

SUSE CVE-2023-52915

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035i2cmasterxfer In af9035i2cmasterxfer, msg is controlled by user. When msgi.buf is null and msgi.len is zero, former checks on msgi.buf would be passed. Malicious data finally...

5.5CVSS6.3AI score0.00211EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2024/08/06 1:59 a.m.•19 views

SUSE CVE-2024-42161

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in the switch statement to initialize val'. GCC warns that val' may be used uninitialized in the BPFCREREADBITFIELD macro, defined in...

6.4CVSS6.5AI score0.0022EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2024/06/13 4:0 a.m.•19 views

SUSE CVE-2024-5840

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS8.6AI score0.00408EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2024/03/27 4:25 a.m.•19 views

SUSE CVE-2021-47174

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapoavx2: Add irqfpuusable check, fallback to non-AVX2 version Arturo reported this backtrace: 709732.358791 WARNING: CPU: 3 PID: 456 at arch/x86/kernel/fpu/core.c:128 kernelfpubeginmask+0xae/0xe0 709732.358793...

5.5CVSS7.8AI score0.00232EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 6:14 a.m.•19 views

SUSE CVE-2006-4124

The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUGFILE environment variable, which is used to create world-writable files when libXm is run from a setuid program...

4.6CVSS7AI score0.00451EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:11 a.m.•19 views

SUSE CVE-2007-3764

The Skinny channel driver chanskinny in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service crash via a certain data length value...

5CVSS6.7AI score0.3152EPSS
SaveExploits2References5
SUSE CVE
SUSE CVE
•added 2023/02/15 6:7 a.m.•19 views

SUSE CVE-2008-3525

The sbniioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAPNETADMIN capability before processing a 1 SIOCDEVRESINSTATS, 2 SIOCDEVSHWSTATE, 3 SIOCDEVENSLAVE, or 4 SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass...

7.2CVSS6.2AI score0.0053EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2023/02/15 5:57 a.m.•19 views

SUSE CVE-2010-3382

tauex in Tuning and Analysis Utilities TAU 2.16.4 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

6.9CVSS7AI score0.00386EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:43 a.m.•19 views

SUSE CVE-2012-6097

File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...

4.3CVSS6.5AI score0.01349EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:27 a.m.•19 views

SUSE CVE-2014-6440

VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service...

9.8CVSS9.8AI score0.04985EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:6 a.m.•19 views

SUSE CVE-2019-19082

Memory leaks in createresourcepool functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption. This affects the dce120createresourcepool function in drivers/gpu/drm/amd/display/dc/dce120/dce120resource.c, the...

5.1CVSS6.5AI score0.00379EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2023/02/15 3:39 a.m.•19 views

SUSE CVE-2021-36783

A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints. This issue affects: SUSE...

9.9CVSS9AI score0.00685EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 3:24 a.m.•19 views

SUSE CVE-2022-35981

TensorFlow is an open source platform for machine learning. FractionalMaxPoolGrad validates its inputs with CHECK failures instead of with returning errors. If it gets incorrectly sized inputs, the CHECK failure can be used to trigger a denial of service attack. We have patched the issue in GitHu...

7.5CVSS8AI score0.00411EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/31 12:30 a.m.•18 views

SUSE CVE-2026-17784

Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.6AI score0.00316EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/30 4:46 p.m.•18 views

SUSE CVE-2026-45737

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotation because HideSecretDatatarget, live, ... does...

6.5CVSS7.6AI score0.00359EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2026/07/25 3:58 p.m.•18 views

SUSE CVE-2026-64497

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELDGET. Create new macros for bit manipulation in combination with manual bit manipulation being replaced with FIELDGET. The...

5.8AI score0.00177EPSS
SaveExploits0References3
Total number of security vulnerabilities5000